Security and privacy
No question the default settings need to be the other way round. Requiring a user action in order to keep their personal details private is utterly unacceptable and, I dare say, illegal in many countries.
I'd be marginally less unhappy if logging back in did not invoke quite so much cross-site scripting from the usual data-slurpers.
Trouble is, who else (besides Google WhatIsYourBloodGroup) has an Android client where I can simply open an existing document in my private cloud workspace and start typing?